Categories: Trojan

Trojan.Agent.ERLI (B) removal

The Trojan.Agent.ERLI (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.ERLI (B) virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
The binary likely contains encrypted or compressed data.
Executed a process and injected code into it, probably while unpacking
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Agent.ERLI (B)?


File Info:
crc32: C79AEF88md5: ad851ce4a38891bc869237e49ac47405name: svchost.exesha1: 238c460b227ccb274aa28050f0dc4a7be1ef51e7sha256: 870c922e5893545be7de6f9478a68301d989315f4046c5663c416f72dd97ba01sha512: 06a32937b8ec2da2b910b7f7b4c12817c79b11eb9d0eeb527e013a720e7ecb4ea5449c117569ee8d0e5c86acf09a2ade9029ed596bcb8c04b9f6f2151bce63e5ssdeep: 12288:KC1TxYROXXH+NrZEb3StxjYr5CuXeJUySYWIcqzZlOJ:DtPHeO3q21CulySYr/otype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Trojan.Agent.ERLI (B) also known as:

MicroWorld-eScan	Trojan.Agent.ERLI
ALYac	Trojan.Agent.ERLI
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan ( 0056739d1 )
BitDefender	Trojan.Agent.ERLI
K7GW	Trojan ( 0056739d1 )
CrowdStrike	win/malicious_confidence_90% (W)
BitDefenderTheta	Gen:NN.ZelphiF.34122.TGW@a83Z9voi
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.EMBN
TrendMicro-HouseCall	TROJ_GEN.R002H0CEP20
Avast	Win32:RATX-gen [Trj]
Kaspersky	HEUR:Trojan.Win32.Kryptik.gen
Alibaba	Trojan:Win32/Kryptik.a0321eb0
AegisLab	Trojan.Win32.Kryptik.4!c
APEX	Malicious
Ad-Aware	Trojan.Agent.ERLI
Emsisoft	Trojan.Agent.ERLI (B)
F-Secure	Trojan.TR/Injector.rstka
DrWeb	Trojan.PWS.Siggen2.49330
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.AdwareDealPly.bc
Fortinet	W32/Injector.ELXR!tr
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.ad851ce4a38891bc
SentinelOne	DFI – Suspicious PE
Avira	TR/Injector.rstka
MAX	malware (ai score=88)
Antiy-AVL	Trojan/Win32.Wacatac
Endgame	malicious (high confidence)
Arcabit	Trojan.Agent.ERLI
ZoneAlarm	HEUR:Trojan.Win32.Kryptik.gen
Microsoft	Trojan:Win32/NanoCore.VD!MTB
AhnLab-V3	Suspicious/Win.Delphiless.X2066
Acronis	suspicious
McAfee	Fareit-FTB!AD851CE4A388
Malwarebytes	Trojan.MalPack.DLF
Panda	Trj/GdSda.A
Rising	Trojan.Injector!8.C4 (CLOUD)
Ikarus	Win32.Outbreak
eGambit	Unsafe.AI_Score_99%
GData	Win32.Malware.AntiVM.GBH76T
AVG	Win32:RATX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.469